CVE-2016-3946

HIGH 7.8CVE-2016-3946 · Published 13/10/2016 · updated 17/06/2026

In short

CVE-2016-3946 is a HIGH (CVSS 7.8) vulnerability affecting sapconsole (sap).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 25.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sapconsole sap	`= 7.30`	No fix yet

Description

SAP Console (aka SAPConsole) 7.30 allows local users to discover SAP Server login credentials by reading the Windows registry, aka SAP Security Note 2121461.

References

seclists.org/fulldisclosure/2016/Oct/31 · Mailing List
securityfocus.com/bid/93509
onapsis.com/research/security-advisories/sap-console-insecure-password-storage · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free